Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: aTG9wovIOc5t7ENynK6joSiOXFHntOh3mP8pg+UCthU=
Subject key identifier: 8B:19:C2:C2:1F:95:12:99:50:16:06:26:77:D7:22:F0:DA:1D:36:D9
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 0197B6D75FD5C1C947D97A65452FF4B6BF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 07E6
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
2: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: BJx3W5dxj32tg6wxrnv48uoOmR48VnQQTilonVwlTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5f:d5:c1:c9:47:d9:7a:65:45:2f:f4:b6:bf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=8b19c2c21f9512995016062677d722f0da1d36d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:d0:b7:73:6e:de:61:53:6f:bd:c0:b3:dd:
fa:14:4c:f9:9a:a3:23:7d:e8:a9:78:a9:8d:be:22:
10:45:b9:16:b0:70:40:76:b3:72:fc:b3:c9:a7:03:
21:88:cd:a6:80:8c:9e:d4:c0:05:44:ce:86:3c:21:
49:96:c3:40:58:74:0f:65:1a:c3:ac:0f:f5:cb:58:
cc:93:5e:a1:1c:cf:2c:19:e7:e4:e6:21:5b:97:df:
06:bb:4f:67:7f:cb:32:30:07:89:5d:54:cb:b6:66:
69:51:62:93:a5:ac:d4:f8:6f:7a:94:d4:a6:22:d5:
f0:2e:76:ca:ae:a7:94:85:85:fe:6d:13:ed:60:45:
cf:31:6b:dd:d0:6c:31:b7:d2:da:99:86:b0:6d:3a:
3d:bd:ed:28:6c:3c:15:f6:b2:5b:13:f7:be:20:9e:
53:74:fa:89:b9:83:c8:1a:f0:68:41:bc:22:e9:c3:
55:6c:3c:66:2f:d9:19:e3:6f:73:ab:c3:c2:b5:17:
da:cb:4f:7c:7e:e5:a2:05:79:ba:86:76:7f:ff:89:
00:d6:25:57:1d:a2:ff:f4:86:a0:c9:89:f2:62:6d:
2a:23:d1:20:3f:ae:7a:66:36:b9:82:1a:e5:e4:0a:
2c:c8:ee:fa:88:0f:6c:ee:76:d9:b4:49:21:7f:b6:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:C2:C2:1F:95:12:99:50:16:06:26:77:D7:22:F0:DA:1D:36:D9
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:85:84:25:b6:f8:ed:b0:e1:17:68:e1:00:10:e9:e4:f3:
4c:e8:92:b7:9e:0e:ba:20:4e:70:78:94:46:2b:c9:ca:5b:a2:
fc:79:62:e0:a7:0c:e1:91:d9:86:11:22:92:b4:2f:ca:04:65:
04:24:33:da:9f:07:3c:9c:eb:4e:5a:22:07:3e:04:df:7a:9c:
f4:42:f0:d3:03:f0:ef:e4:0d:7a:68:33:1d:a8:82:83:31:7b:
67:e7:0a:0a:39:25:f1:5f:a3:40:15:ed:88:eb:e5:35:6b:4d:
e8:db:a5:2b:39:c3:01:e6:00:df:13:32:ab:c6:47:0e:54:41:
f4:ba:e8:aa:bf:e9:3f:bf:ae:17:6d:4d:e3:07:fa:ea:7f:12:
0f:d3:1e:bf:58:a6:b6:8c:78:8f:0b:ae:16:7e:80:aa:8c:d6:
1f:08:5c:30:05:f2:c5:79:23:f5:c4:7d:b5:10:af:cd:0f:9c:
07:f8:56:2d:7f:e1:93:46:f7:77:6f:d2:7e:13:ab:f8:34:4f:
01:ca:24:53:42:76:30:38:b1:14:f3:4e:7b:cf:c3:aa:1e:85:
2a:6c:31:5f:5b:0f:54:1b:e1:52:c0:6a:98:1a:72:dc:a1:ae:
25:5e:c0:a4:3d:90:e7:b7:03:6c:c2:8e:9f:60:19:b2:57:2c:
06:3f:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:37 2025 by rpki-client